$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3848.roa File: AS3848.roa (raw, json) Hash identifier: 0Xx/veRToiA4X2LhKhUlMStb3aAy3rMAlfVPwjZnFqA= Subject key identifier: 2F:F3:DD:E5:2E:5B:6C:99:36:63:88:02:B7:B9:45:8F:F8:1F:01:F5 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 722E3BA7E4B385B400A70F42D712BD0C76819335 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3848.roa Signing time: Sat 14 Nov 2026 02:00:00 +0000 ROA not before: Sat 14 Nov 2026 01:55:00 +0000 ROA not after: Sat 13 Nov 2027 02:00:00 +0000 asID: 3848 IP address blocks: 157.254.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 02:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2e:3b:a7:e4:b3:85:b4:00:a7:0f:42:d7:12:bd:0c:76:81:93:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Nov 14 01:55:00 2026 GMT Not After : Nov 13 02:00:00 2027 GMT Subject: CN=2FF3DDE52E5B6C9936638802B7B9458FF81F01F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:b8:c4:c2:82:d5:d8:7e:7d:0f:7c:6c:13: d7:86:04:ec:0b:55:b5:83:fb:04:ff:a5:1e:a0:c8: 31:43:6c:56:08:16:77:76:62:03:dd:9b:91:c8:0d: 88:ac:2a:da:5d:ef:8c:67:f2:a3:36:10:52:be:84: 92:35:d7:b5:df:24:ed:0b:59:07:07:44:02:d6:85: 28:4b:a0:0a:49:f0:75:15:d8:b2:ab:16:1c:09:03: d7:ef:69:38:e5:36:75:11:3c:a0:59:1e:38:aa:6e: a5:0d:cc:a4:1d:29:7f:e9:f7:0c:9a:4a:3f:93:d8: 6d:b0:43:92:a1:d8:e3:d2:50:7d:38:5e:f9:9d:dd: 7f:21:2c:43:3d:fb:32:fa:3f:63:c4:93:54:45:0b: ac:68:a2:1f:55:88:0a:9b:15:86:bb:3b:69:9a:75: 50:90:3a:0a:3d:f2:67:f3:d0:7b:db:25:79:b0:d9: 86:ea:72:0e:b1:d1:f8:23:d5:12:6f:82:ce:79:5d: d3:57:5b:71:78:7d:34:6f:bc:22:85:57:4b:a5:08: 9f:ba:89:47:e3:2c:98:92:ba:a8:30:48:f6:87:83: 5d:20:fd:9d:09:8d:44:51:77:24:71:cc:c1:19:63: 86:60:50:8b:a0:40:1b:5d:dc:28:b0:10:83:fa:47: 25:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F3:DD:E5:2E:5B:6C:99:36:63:88:02:B7:B9:45:8F:F8:1F:01:F5 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.49.0/24 Signature Algorithm: sha256WithRSAEncryption 00:29:dc:6e:9e:b9:4a:7b:24:0d:b8:03:99:a0:ee:35:1d:b4: 6d:46:70:f4:6c:45:46:cd:cb:5f:da:9b:09:0e:3d:b8:36:a7: 78:4a:ba:07:f9:e5:d8:83:48:c4:fe:6b:18:4e:d7:10:7c:b0: 24:b5:80:0a:f4:26:36:d7:63:a6:dc:d8:ea:0c:cf:2c:0b:82: 0b:8e:5e:36:7c:7d:b2:6c:e3:03:de:5a:21:0d:5a:c0:1d:a3: 31:42:82:54:fd:88:b1:bc:f0:79:57:13:5a:98:99:67:ef:65: 09:7d:cf:4d:dd:a7:d5:dc:10:a5:31:03:eb:07:99:63:40:65: e0:35:28:4d:2c:d7:d3:58:9a:f5:8a:db:cc:ca:1d:11:7b:49: a7:c8:d0:86:a6:c2:65:6e:cc:06:2e:02:b5:5f:63:cb:d6:82: 40:7f:bc:c5:5a:a6:38:94:cb:ac:16:4a:5d:47:ed:35:18:93: 09:c0:70:01:0f:ca:6f:66:4e:22:db:fb:3c:97:f8:0e:1f:b7: 70:11:3b:cb:f6:15:c4:ed:0e:a5:dc:fd:72:8a:b1:71:8f:54: 67:68:4e:73:43:f9:ec:2c:f9:6e:27:aa:92:b7:00:05:b7:44: e9:3b:2d:d5:66:86:83:ce:5c:54:89:c0:70:a2:f9:4c:42:9a: dc:0c:87:ef -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUci47p+SzhbQApw9C1xK9DHaBkzUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYxMTE0MDE1NTAwWhcNMjcxMTEzMDIwMDAw WjAzMTEwLwYDVQQDEygyRkYzRERFNTJFNUI2Qzk5MzY2Mzg4MDJCN0I5NDU4RkY4 MUYwMUY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiK4xMKC1dh+ fQ98bBPXhgTsC1W1g/sE/6UeoMgxQ2xWCBZ3dmID3ZuRyA2IrCraXe+MZ/KjNhBS voSSNde13yTtC1kHB0QC1oUoS6AKSfB1FdiyqxYcCQPX72k45TZ1ETygWR44qm6l DcykHSl/6fcMmko/k9htsEOSodjj0lB9OF75nd1/ISxDPfsy+j9jxJNURQusaKIf VYgKmxWGuztpmnVQkDoKPfJn89B72yV5sNmG6nIOsdH4I9USb4LOeV3TV1txeH00 b7wihVdLpQifuolH4yyYkrqoMEj2h4NdIP2dCY1EUXckcczBGWOGYFCLoEAbXdwo sBCD+kclcwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFC/z3eUuW2yZNmOIAre5RY/4 HwH1MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM4NDgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/jEwDQYJKoZIhvcNAQELBQADggEB AAAp3G6euUp7JA24A5mg7jUdtG1GcPRsRUbNy1/amwkOPbg2p3hKugf55diDSMT+ axhO1xB8sCS1gAr0JjbXY6bc2OoMzywLgguOXjZ8fbJs4wPeWiENWsAdozFCglT9 iLG88HlXE1qYmWfvZQl9z03dp9XcEKUxA+sHmWNAZeA1KE0s19NYmvWK28zKHRF7 SafI0IamwmVuzAYuArVfY8vWgkB/vMVapjiUy6wWSl1H7TUYkwnAcAEPym9mTiLb +zyX+A4ft3ARO8v2FcTtDqXc/XKKsXGPVGdoTnND+ews+W4nqpK3AAW3ROk7LdVm hoPOXFSJwHCi+UxCmtwMh+8= -----END CERTIFICATE-----Generated at Sun Nov 15 21:15:03 2026 by rpki-client